Pentera Blog: Pentesting, Red Teaming & Security

Ethical Hacking Lessons: Insights from 60 Enterprise Companies

Arik Liberzon

28 May 2019

Pentera’s findings across 60 enterprise organizations show that cyber resilience often breaks down not at the perimeter, but in privilege misuse, misconfigurations, and overlooked internal weaknesses. Continuous penetration testing helps security teams think like attackers, validate real exposure, and focus remediation on the vulnerabilities that truly matter.

Moving Beyond Traditional Vulnerability Management

Arik Liberzon

15 Jan 2019

Vulnerability management remains essential, but static scanning alone cannot show which weaknesses are truly exploitable or business-critical. Automated penetration testing closes that gap by validating real attack paths, helping security teams prioritize remediation based on breachability rather than volume.

How Automated Pentesting Mimics Hacker Techniques

Aviv Cohen

11 Dec 2018

Cyber defense remains dangerously imbalanced when attackers operate at machine speed while validation is still performed manually and infrequently. Automated penetration testing helps close that gap by continuously challenging defenses with real attacker techniques and making security validation scalable.

Mitigating the EternalBlue Vulnerability

Pentera Team

11 Dec 2018

Even years after major vulnerabilities like MS17-010 were patched, many organizations remain exposed due to incomplete remediation and lack of validation. Continuous penetration testing helps security teams prove that fixes were actually implemented and that one missed system does not become the starting point for a larger breach.

A worldwide cyber warfare

Aviv Cohen

06 Dec 2018

As global cyber conflict grows more complex, enterprises cannot rely on static defenses or occasional reviews to stay resilient. Continuous, automated security validation helps CISOs measure real exposure daily and focus resources on the vulnerabilities that matter most.

Improving Cyber Resilience by Thinking Like a Hacker

Arik Liberzon

06 Oct 2018

Effective cybersecurity requires more than stronger defenses—it requires thinking like an attacker and continuously testing whether those defenses actually hold. By combining an offensive mindset with frequent validation and stronger internal controls, organizations can better identify critical weaknesses before malicious actors do.

The Value of Penetration Testing Over Vulnerability Scans

Arik Liberzon

06 Oct 2018

Vulnerability assessments can identify thousands of issues, but they do not show which ones can actually be chained into a real breach. Automated penetration testing adds that missing layer by validating exploitable attack paths and helping security teams prioritize remediation based on actual business risk.

Why Automated Pentesting is on the Rise

Aviv Cohen

17 Sep 2018

Penetration testing remains one of the strongest ways to validate cyber risk, but the traditional service model is too costly, infrequent, and limited for today’s threat landscape. Automated pentesting gives organizations a scalable way to test continuously, reduce exposure, and keep pace with evolving attacker techniques.

Top Ingredients for a Winning Startup

Amitai Ratzon

30 Jul 2018

Scaling a cybersecurity company takes more than ambition - it requires product-market fit, rapid proof of value, access to top talent, and a team built to execute. Pentera’s growth story shows how strong leadership and a must-have innovation can turn a promising product into a category-defining business.

Comparing Cyber Warfare to Chess Strategies

Arik Liberzon

11 Jul 2018

Cybersecurity is rarely won or lost through a single vulnerability; it is shaped by how well organizations anticipate and disrupt multi-step attack paths. By applying an attacker’s mindset through continuous penetration testing, security teams can strengthen defenses proactively and stay ahead of evolving threats.

The Key Benefits of Automated Security Validation

Amitai Ratzon

07 Jan 2018

Organizations across finance, retail, insurance, and healthcare are adopting automated security validation because it delivers what traditional testing often cannot: continuous, realistic validation of exploitable risk. By emulating real-world attacker behavior and prioritizing remediation by business impact, it helps security teams scale defenses with greater clarity and confidence.